api_auth

HMAC authentication for Rails and HTTP Clients

MIT License

Downloads
4.4M
Stars
480
Committers
48
View Code on GitHub
Ecosystems: Ruby on Rails, Ruby

Bot releases are hidden (Show)

api_auth - v2.1.0 (2016-12-22) Latest Release

Published by kjg almost 8 years ago

  • Fixed a NoMethodError that might occur when using the NetHttp Driver (#130 grahamkenville)
  • More securely compare signatures in a way that prevents timing attacks (#56 leishman, #133 will0)
  • Remove support for MD2 and MD4 hashing algorithms since they are insecure (#134 will0)
  • Disallow requests that are too far in the future to limit the time available for a brute force signature guess (#119 fwininger)
api_auth - v2.0.0

Published by kjg about 8 years ago

  • IMPORTANT: 2.0.0 is backwards incompatible with the default settings of v1.x
    v2.0.0 always includes the http method in the canonical string.
    You can use the upgrade strategy in v1.4.x and above to migrate to v2.0.0
    without any down time. Please see the 1.4.0 release nodes for more info
  • Added support for other digest algorithms like SHA-256 (#98 fwininger)
api_auth - v2.0.1 (2016-07-25)

Published by kjg about 8 years ago

  • Support of api_auth_options in ActiveResource integration (#102 fwininger)
  • Replace use of #blank? with #nil? to not depend on ActiveSupport (#114 packrat386)
  • Fix Auth header matching to not match invalid SHA algorithms (#115 packrat386)
  • Replace alias_method_chain with alias_method in the railtie since
    alias_method_chain is deprecated in Rails 5 (#118 mlarraz)
Package Rankings
Top 2.03% on Rubygems.org
Badges
Extracted from project README
Build Status Gem Version
Related Projects
rails_mvp_authentication

An authentication generator for Rails 7. Generate all the files needed to create a feature rich a...

07 Feb 2022 78
auth0_rails_api_example

Sample Rails 6 project demonstrating API authorization with auth0

19 Dec 2016 10
artemis

Ruby GraphQL client on Rails that actually makes you more productive

26 Sep 2018 188
devise-api

The devise-api gem is a convenient way to add authentication to your Ruby on Rails application us...

08 Jan 2023 156
authentication-zero

An authentication system generator for Rails applications.

14 Feb 2022 1,538
challah

User authorization and session management in Rails.

26 Jan 2012 18
tokie

Token based authentication from scratch. https://rubyplus.com/articles/4311-Securing-an-API-in-Ra...

05 Dec 2016 12
fitbit_api

A Ruby interface to the Fitbit Web API.

09 Aug 2015 23
rails-security-checklist

Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren'...

31 Dec 2016 1,355
devise

Flexible authentication solution for Rails with Warden.

16 Sep 2009 23,700
auther

A multi-account, form-based, database-less, application-wide, Rails authenticator.

10 Jan 2014 23
zen-rails-security-checklist

Checklist of security precautions for Ruby on Rails applications.

10 Apr 2017 1,811
devise-jwt

JWT token authentication with devise and rails

12 Jan 2017 1,250
rails_5_api_tutorial

Building the Perfect Rails 5 API Only App & Documenting Rails-based REST API using Swagger UI

12 Oct 2016 66
api_guard

JWT authentication solution for Rails APIs

10 Mar 2018 277